• problems with voip telephony, using site to site vpn connection

    Carlos Daniel Hernandez Ramos
    Carlos Daniel Hernandez Ramos
    implementing vpn site to site connection, causes problems with ip telephony, when starting the connection or disabling the connection causes my voip phones to start disconnecting from the pbx. once the connection is established and having the vpn connected…
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • IPsec Connections using two Uplinks and DDNS

    FICS
    FICS
    Hello Community, here's the situation: Head Office (HO) : two WAN uplink connections, both have static IPs. One connection is 'cost based' and slower (backup WAN) and the other is quicker and has no traffic costs (primary WAN). Weights have been configured…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • Ipsec and mss-clamping. Is there a way to make them persistent?

    LMSIIATO
    LMSIIATO
    Hi all, I have an xgs 3100 firewall on which about 20 ipsec tunnels are attested. All these ipsec have fragmentation problems so I am forced to use mss-clamping. For example without mss-clamping an icmp packet passes as long as I set a size of 1400…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • Distribute IPSec site-to-site network via OSPF

    Patrick's
    Patrick's
    Hello, I found a solution where IPSec networks are distributed via OSPF and would like to know if this is correct? Can I use this in a productive environment? 1. SSH -> 4. Device Console 2. system ipsec_route add net 192.168.123.0/255.255.255.0 tunnelname…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • RED vs IPSec (XGS)

    Vinícius Oliveira
    Vinícius Oliveira
    [POST DE DEBATE SOBRE O ASSUNTO] Opa pessoal! Em minha infraestrutura eu tenho o escritório na matriz (XGS 3100) conectado a outros quatro escritórios filiais (XGS 136) por Tunel RED, utilizando a configuração RED Server no escritório matriz e RED Client…
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • IPSEC site to site VPN, initiator behind router

    GaryBrown
    GaryBrown
    We are wanting to connect our remote office, which is in a managed/shared office space building, to our head office. We have no control over the shared office netowrk. We have a XGS in the managed office space. The internet connection is supplied…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • XGS2100 (SFOS 20.0.2 MR-2-Build378) - Fritzbox 7490 VPN

    Martin Schneider
    Martin Schneider
    Hi, after updating to 20.0.2 the Site to Site VPN connection between our XGS (Host) and the Fritzbox is not working anymore. Before the Update is was workking without any problems. A downgrade to 20.0.0 is also impossible as the XGS always tells Firmware…
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • IPSEC VPN Routing traffic between multiples sites

    PP User
    PP User
    Hi, We need to establish a multiple site to site IPSEC VPN with a XG86w as the HQ. Both remote sites have a TELTONIKA RUT240 router. I am able to ping from HQ both remote sites, and from each remote site the HQ, but can’t ping a remote site from…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • IPSEC Site to site conneted

    Yunus Abass Ibrahim
    Yunus Abass Ibrahim
    I Need help regarding my ipsec. I have two sites HQ and remote site. The firewall is connected through ipsec. I have set both inbound and outboud rules. But am still not able to ping each end of the firewall or to remotely access resources at HQ. Kindly…
    • Answered
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • I cannot connect to VPN using strongswan or ovpn on linux

    Omotola Adeb
    Omotola Adeb
    My server is Sophos Firewall XG125 (SFOS 17.5.16 MR-16-Build830). Sophos connect works perfectly but the .ovpn file downloaded(via user interface) will not connect. I also used the details from the .tgb to build a config file for strongswan, but didn…
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • Assistance Required with Site-to-Site VPN Configuration between sophos and Azure

    Michael9609
    Michael9609
    Dear Sophos Support, I hope this message finds you well. We are experiencing an issue with our Site-to-Site VPN setup. While the VPN tunnel appears to be up and stable, we are unable to access the servers that are sitting behind the Azure gateway…
    • 2 months ago
    • Sophos Firewall
    • Discussions
  • IPSec V2 Verbindung mit 1:2 Subnetzen

    karsten_boldt
    karsten_boldt
    Moin, Ich will zwei Standorte verbinden. Auf der einen Seite ist ein Subnetz die sich über eine PFSense auf die andere Seite über eine Sophos XG mit zwei Subnetzen verbinden soll. Phase 1 ist kein Problem, aber es wird nur ein Subnetz verbunden. Wenn…
    • 2 months ago
    • Sophos Firewall
    • German Forum
  • Ipsec VPN couldn't established.

    Dinesh Kandeeban
    Dinesh Kandeeban
    Hi, I have configured the tunnel from DC to another location, The tunnel couldn't established. I don't know what is the reason the tunnel has down. I have debug the issue still unable to find out the issue, please assist me to resolve the issue
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Sophos VPN

    Yasha Burns
    Yasha Burns
    Hello, Recently one of our clients contacted us about purchasing some new Sophos firewalls. They had some VPN settings on their old Meraki firewalls. We have the VPN settings now, but it seems like most of these settings don't even exist in the Sophos…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • Sophos site to site VPN changes take long to apply, changes dont apply

    Rog163
    Rog163
    Hi All - ive had this issue for over 2-3 years now - when trying to make changes on site to site vpns - either the changes take long to apply, dont apply or need to apply several times. i try to change local ID for example on an existing site to site…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • VPN with Drayteks constant disconnects

    Andrej Pirman
    Andrej Pirman
    Hi, I have a bunch of XGS firewalls in main offices of my customers, which have branch/remote offices with Draytek routers, different models. I have not paid attention till now, when one of those reported intermittent issues with Site2Site IPSec VPN…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • No traffic through VPN tunnel

    b_trahn User
    b_trahn User
    Hello, I have a problem with an ipsec Site to Site tunnel. The tunnel is being built, but no traffic is going through the tunnel. The remote station is connected to a router via LTE and a Dyn DNS entry. I checked local and remote subnets. The firewall…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • NAT between RED20 and IPSec on XGS v20

    Heiko Dammlaks
    Heiko Dammlaks
    Hi I need to translate packets between an ISec and a RED 20. There is an IPSec tunnel with 172.18.10.0/24 on the remote site and 172.26.143.1/24 on the Sophos. I have a RED device with 192.168.54.1/24. I would access form REDs subnets hosts (maybe…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • NAT over IPSeC Site-to-Site VPN

    Dimitris Roubos
    Dimitris Roubos
    Greetings fellow members, I have 2 networks with 1 sophos firewall each, network A (Public IP/80.80.80.128, Local Network/192.168.20.1/24) and network B (Local Network 192.168.10.1/24). Sophos B XGS107 ( SFOS 19.5.3 MR-3-Build652) Sophos A XG135…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • HOW TO CHECK FOR UP TIME IN IPSEC VPN TUNNEL

    eFrancis
    eFrancis
    Hello All, The client has requested to know the uptime in the IPSEC VPN Tunnel. Sophos Model: XGS4500 Thank you
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • XGS87 (SFOS 20.0.2 MR-2-Build378) VPN Routing Problem

    Help Me
    Help Me
    Hello, we have a problem which with the routing over VPN. A user is connected to SSL VPN with the XGS. The XGS has a site to site IPsec VPN connection to resources in the cloud. A request from the user's client using SSL VPN for resources in the…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • IPSEC connection showing this error Couldn't authenticate the local gateway. Check the authentication settings on both devices.

    Anesu Dangarembwa
    Anesu Dangarembwa
    We are trying to setup a IPSEC tunnel between a Sophos Firewall and a ISR4300 After activating its showing error Couldn't authenticate the local gateway. Check the authentication settings on both devices.
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • DHCP requests not routing over IPSEC

    Stuart James
    Stuart James
    DHCP requests not routing over IPSEC This has nothing to do with v21.0. It is possible in v18.0. You just have to run a whole stack of CLI commands because the GUI is inadequate. A post by a Sophos staff member to a closed thread which no-one…
    • 3 months ago
    • Sophos Firewall
    • Discussions
  • WIFI "separate zone" didn't work over IPSec

    dirkkotte
    dirkkotte
    Hi all, AP configuration works. I am able to remove & add the AP's. AP's are recognized and shown as active. I can see the traffic between AP & XGS Port 2712. Traffic to port 8472 from firewall to AP is not answered, but i see packets from AP to APIPA…
    • Answered
    • 4 months ago
    • Sophos Firewall
    • Discussions
  • Firewall IPsec Site2Site settings page slowdown

    Jens Frankiewicz
    Jens Frankiewicz
    Hi all, when we try to add or change a configuration on the IPsec settings page on our XG/XGS Firewalls we always have to wait for about 2 minutes for the site to load and for it to be usable. The web browser shows the message "This page is slowing…
    • Answered
    • 3 months ago
    • Sophos Firewall
    • Discussions
<>